Adam Shostack

JANUARY 2, 2025

An unexpected book review. I hate reviewing books by people I know, because I am a picky reader, and if you can't say anything nice, don't say anything at all. I also tend to hate management books, because they often substitute jargon for crisp thinking. It is not a book for the CSO. Here's how to interpret results.

CSO 130

CSO Cyber Risk Backups Risk 130

Malwarebytes

MARCH 5, 2025

Beginning the message with emojis, Birdie started the chat… Group invitation on X [emoji intro] Hello, I am a third-party agency from the UK, specializing in providing ranking and likes services for Booking+Airbnb hotel applications. Tina tells me all you need is internet access and you can start working for booking.com.

Scams 122

Scams Accountability Mobile Cryptocurrency 122

The Last Watchdog

FEBRUARY 1, 2021

The cybersecurity operational risks businesses face today are daunting, to say the least. Ted Harrington’s new book Hackable: How To Do Application Security Right argues for making application security a focal point, while laying out a practical framework that covers many of the fundamental bases. But where to start?

Risk 154

Risk Social Engineering Software Password Management 154

Adam Shostack

FEBRUARY 4, 2019

I hate reviewing books by people I know, because I am a picky reader, and if you can’t say anything nice, don’t say anything at all. I also tend to hate management books, because they often substitute jargon for crisp thinking. It is not a book for the CSO. The book is organized into two major parts.

CSO 100

CSO Cyber Risk Backups Risk 100

The Last Watchdog

JANUARY 13, 2021

For children, concepts like cyber criminals, hackers, private information, and the vast idea of Internet dangers are abstract concepts. You can explain that hackers break in through the Internet to steal information. I’ve also been brought in to host virtual reading events with the book for corporate and nonprofit efforts.

Scams 203

Scams Education Password Management Passwords 203

Malwarebytes

MARCH 17, 2025

The findings reveal that the public approaches cybersecurity as a patchwork quilt, implementing some best practices while forgoing others, and engaging in a few behaviors that carry significant risk online. A safer option for vacationers is to book travel directly with an airline or hotel chain.

Scams 97

Scams Passwords VPN Backups 97

The Last Watchdog

FEBRUARY 15, 2021

Consider that kids are constantly connected on the internet with online games, streaming devices, virtual schooling, and zoom play dates. Mistakes online by one family member can lead to compromises in a household’s network, placing computers, personal data, and perhaps even work-related content at risk. We’re all connected.

Education 203

Education CISO Security Awareness Cybersecurity 203

Malwarebytes

MAY 28, 2025

The FTCs 2024 Annual Data Book shows that 16% of the reported fraud attempts were text-based, with a criminal revenue of some $470 Million. The FBI asks that if you receive a suspicious message, contact the FBI Internet Crime Complaint Center at ic3.gov. Reportedly , in April of 2025 alone, Americans received 19.2

Scams 100

Scams Mobile Phishing Internet 100

Cisco Security

JULY 7, 2025

During his time with Cisco and at Robust Intelligence before that, Hyrum has been on a self-proclaimed crusade to get people to understand the cybersecurity risks from AI/ML. In terms of technology, the Internet of Things (IoT) was still getting off the ground, and AI was largely still science fiction.

Cyber Risk 104

Cyber Risk Media Risk Cybersecurity 104

Schneier on Security

JANUARY 9, 2018

Daniel Miessler criticizes my writings about IoT security: I know it's super cool to scream about how IoT is insecure, how it's dumb to hook up everyday objects like houses and cars and locks to the internet, how bad things can get, and I know it's fun to be invited to talk about how everything is doom and gloom. Yes, definitely.

IoT 154

IoT InfoSec Risk Internet 154

Malwarebytes

SEPTEMBER 21, 2021

Today’s generation of kids and teens consider their devices and the Internet as extensions of their lives. So without further ado, let’s dive into what we should be teaching our kids about Internet safety and what we can do to enforce these teachings. 7 Internet safety tips. Keep your online accounts secure.

Internet 129

Internet Internet Passwords Password Management 129

Adam Levin

FEBRUARY 10, 2020

Most likely you didn’t pause before you clicked, and got phished or compromised in some other way–possibly by an internet of things device connected to your home network. Here are five things you should do today to decrease the risk of a cyberattack affecting your life or your company directly. Your Finances Glitch.

Passwords 245

Passwords Phishing Password Management Accountability 245

Daniel Miessler

MAY 8, 2020

A lot of people are thinking about the security of their home network right now, and as one of the project leaders on the OWASP Internet of Things Security Project , I wanted to provide three levels of security you can do at home. Enable 2FA for high-risk systems. Segment your high-risk devices onto a separate network.

Passwords 255

Passwords DNS Accountability IoT 255

The Last Watchdog

FEBRUARY 21, 2023

Related: Preparing for ‘quantum’ hacks That being so, a new book, Fixing American Cybersecurity , could be a long overdue stake in the ground. This is a well-reasoned treatise collaboratively assembled by board members of the Internet Security Alliance ( ISA.) Acohido Pulitzer Prize-winning business journalist Byron V.

Marketing 199

Marketing Cyber Risk Cybersecurity Internet 199

Schneier on Security

MARCH 19, 2024

Now front pages are splashed with stories of social platforms’ role in misinformation , business conspiracy , malfeasance , and risks to mental health. 1: Advertising The role advertising plays in the internet arose more by accident than anything else. This has been true for social media, and it will similarly hold true for AI.

Media 351

Media Advertising Surveillance Artificial Intelligence 351

Schneier on Security

APRIL 12, 2018

Good article about how difficult it is to insure an organization against Internet attacks, and how expensive the insurance is. But even with 20 years' worth of experience and claims data in cyberinsurance, underwriters still struggle with how to model and quantify a unique type of risk. There are two basic models for insurance.

Insurance 152

Insurance Cybersecurity Data breaches Healthcare 152

Webroot

JUNE 17, 2025

Scammers are targeting the travel industry, putting millions of travelers at increased risk. Why travelers are prime targets Being in an unfamiliar environment can put your personal information at risk if you’re relying on public Wi-Fi networks, using shared devices, and carrying valuable personal and business data on mobile devices.

VPN 82

VPN Scams Phishing Computers and Electronics 82

CyberSecurity Insiders

APRIL 29, 2022

Identify assets and their associated risks. The best asset management software sets up a stock of your organization’s assets, phases of their entire life cycles, most recent software upgrades, the risks they could face, and the approaches to ensure their security. . . Handle the threats’ possible risks. .

Cyber Risk 122

Cyber Risk Software Risk IoT 122

Krebs on Security

JANUARY 22, 2019

Experts at Cisco Talos and other security firms quickly drew parallels between the two mass spam campaigns, pointing to a significant overlap in Russia-based Internet addresses used to send the junk emails. domaincontrol.com and ns18.domaincontrol.com). domaincontrol.com).

DNS 278

DNS Internet Internet Computers and Electronics 278

The Last Watchdog

JUNE 1, 2022

In order to extract value from the Internet, data sprawl first must get reined in. Jeff Bezos solved data sprawl for selling books and gave us Amazon. Acohido is dedicated to fostering public awareness about how to make the Internet as private and secure as it ought to be. (LW This has always been the case.

Unstructured Data 235

Unstructured Data Government Internet Internet 235

The Last Watchdog

MAY 14, 2019

One of the catch phrases I overheard at RSA 2019 that jumped out at me was this: “The internet is the new corporate network.” The authentication step can be either static – no matter what, it will always deny access or request a two-factor authentication – or it can be adaptive based on real-time risk analysis. Talk more soon.

Authentication 178

Authentication Digital transformation Risk Internet 178

Daniel Miessler

SEPTEMBER 27, 2020

The Difference Between Threats and Risks. The problem we have as humans is that opportunity is usually coupled with risk, so the question is one of which opportunities should you take and which should you pass on. And If you want to take a certain risk, which controls should you put in place to keep the risk at an acceptable level?

VPN 326

VPN Risk Hacking Encryption 326

The Last Watchdog

AUGUST 18, 2021

This deal reads like to the epilogue to a book titled The First 20 Years of the Supremely Lucrative Antivirus Market. There are simple steps consumers can take today, for free, to lower their overall risk of a cyber attack, including using multi-factor authentication for their accounts and using strong passwords.

Antivirus 223

Antivirus Marketing Identity Theft Social Engineering 223

Schneier on Security

FEBRUARY 6, 2023

And while there are new risks inherent in the ML model, all of that complexity still runs in software. And all of that is on a computer, on a network, and attached to the Internet. This shouldn’t come as a surprise to anyone who has been working with Internet security. Training data are still stored in memory somewhere.

Encryption 273

Encryption Hacking Software Social Engineering 273

The Last Watchdog

JULY 29, 2021

“What this allows decision makers to do is visualize risk,” Kedrosky says. When you’re talking at the senior management and board level, the discussion is about risk management; information security is just another chapter in the enterprise risk management book. And graph analytics allows them to map out their risk.”.

Risk 214

Risk Cloud Migration Digital transformation Software 214

Troy Hunt

APRIL 23, 2018

As expected, the internet responded with much hilarity because no-way, no-how are any of the analogies in that video even remotely equivalent to digital piracy: And even if they were - even if you could directly compare the way both a movie and a car can be illegally obtained then yes, of course people would do it! Lock, unlock.

Internet 250

Internet Internet Penetration Testing Hacking 250

The Security Ledger

AUGUST 18, 2022

We speak with Mikko Hyppönen on the sidelines of the DEF CON Conference in Las Vegas to talk about his new book, “If its Smart it Vulnerable.". We speak with Mikko Hyppönen on the sidelines of the DEF CON Conference in Las Vegas to talk about his new book, “If its Smart it Vulnerable." Click the icon below to listen.

Cyber Risk 98

Cyber Risk Risk Data privacy Internet 98

Notice Bored

APRIL 20, 2022

When you acquire or provide professional services, how do you address the associated information risks? In theory, clients and providers should proactively identify, evaluate and address information risks relating to or arising from professional services in order to avoid, reduce or limit the damage arising from such incidents.

Risk 72

Risk Energy and Utilities Computers and Electronics Telecommunications 72

IT Security Guru

MARCH 21, 2023

A lot of internet users cannot imagine having a life without technology or access to e-ticket booking, e-commerce, online banking, the latest news, or getting in touch with their family and friends using online communication or through social media. But is it always safe to surf the internet? What is Virtual Reality?

Cybersecurity 135

Cybersecurity Cyber threats Technology Risk 135

Cisco Security

NOVEMBER 22, 2022

However, the scale of what our people and security teams need to protect within the enterprise and the internet as a whole, keeps getting bigger. This strategy is underpinned by risk-based contextual analysis (i.e., In this e-book, we identify the key steps to implementing security resilience. That all sounds basic.

Risk 145

Risk Internet Internet 145

Cisco Security

OCTOBER 7, 2022

The truth is, most of us have information online that we don’t realize can put us at risk, and that’s why I’ve written this series: to inform readers about how doxxing happens, and how you can protect yourself from this very real and growing problem by doxxing yourself. HOW DO I “DOX MYSELF”?

Media 139

Media Identity Theft Accountability Internet 139

Daniel Miessler

NOVEMBER 6, 2020

Insurance companies will perform massive, centralized data aggregation exercises as part of their setup process for customers, and they’ll use that as input into their algorithms that determine risk of breach payout. Automation (powered by AI). If you get value from this content, you can support it directly by becoming a member.

InfoSec 255

InfoSec Insurance Artificial Intelligence Cybersecurity 255

Security Boulevard

MAY 6, 2021

But, the issues around cybersecurity are here to stay, and the gas pedal must not be eased – especially with the increased risks associated with continued remote working. The Risk Grows Despite lockdown restrictions easing, cybersecurity risks remain and are likely to grow as COVID-19 changes the working landscape.

Cybersecurity 140

Cybersecurity DNS Education Security Awareness 140

Malwarebytes

APRIL 5, 2021

You’ve likely heard the benefits of using a VPN: You can watch TV shows restricted to certain countries, you can encrypt your web traffic on public WiFi networks, and, importantly, you can obscure your Internet activity from your Internet Service Provider, which may use that activity for advertising.

Scams 96

Scams VPN Internet Internet 96

Schneier on Security

APRIL 20, 2018

Organizers collected 25 pieces of voting equipment, including voting machines and electronic poll books. We also need to better secure the voter registration websites, with better design and better internet security. A manual, post-election, risk-limiting audit varies the number of ballots examined according to the margin of victory.

Computers and Electronics 268

Computers and Electronics Manufacturing Banking Backups 268

Security Affairs

MARCH 19, 2021

According to a report published by researchers at PrivacySavvy, many travel companies expose users’ data through their booking apps. In a report published on the 16 th of March by PrivacySavvy, many travel companies expose users’ data through their booking apps.

Data breaches 121

Data breaches Encryption Hacking Healthcare 121

Schneier on Security

FEBRUARY 21, 2020

My most recent two books, Data and Goliath -- about surveillance -- and Click Here to Kill Everybody -- about IoT security -- are really about the policy implications of technology. Authentication risks surrounding someone's intimate partner is a good example.). Policy doesn't work that way; it's specifically focused on use.

Technology 270

Technology Encryption Surveillance Government 270